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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide an elliptic 
curve converting device which converts an elliptic 
curve selected optionally as a safe elliptic curve 
suitable for ciphering into an elliptic curve having 
safety equivalent to that of the said elliptic curve 
and capable of decreasing the calculation quantity. 
SOLUTION: Relating to this converting device 200, a 
conversion coefficient acquisition part 220 uses 
parameters (a) and (b) and an element G of a 
received elliptic curve E to obtain a conversion 
coefficient (t) as an element on a finite body GF(p) 
so that t4 x a(mod p) is 32 bits. A converted 
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elliptic curve calculation part 230 calculates 
parameters a' and b' of an elliptic curve 
Ety'2=x'3+a' x x '+b' constituted on the finite body GF 
(p) to calculate an element Gt on the elliptic curve 
Et A parameter sending-out part 240 send out the 
calculated parameters a' and b' and element Gt(xt0 

ytO). 
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(57) \mm 

fcTcGfcfcJB^T. ^GMS&IOtff §P 2 2 0 1±. t'4x 
a (mod p) #3 2 fcf v H6*T£fc5«fc-5K:. 
PftffcGF (p) ±©7C-C&«&S0W8Kt «fl«»U 38ft 
«RftitjWajW2 3 WGF (p) ±tc«iias 
*i*«fRffi»E t : y" "2 = x' "3 +a* x 
x' +b* 0V\°7*-#a' , b' feJfffiU «Bffi» 
Et±®7cGt*JWSU /*5*-«iSffiW2 4 0tt. 
ty|a^ai$nf-yN'7^-^ a' , b' fc, JcGt (x t 
0, ytO) £ fc^SP^m-f 3. 
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C»#9U] lo®fl|RiaittES:SB»0T«I©lO© 

iil&pi:, ffiRffi*£E©/\'5*-# afttfA 
5*-#b4:. ^-^>KW h 4: LTOteG 4: 
SfST'^ot, flIRfifcEtt, ^pgftGF (p) ±T' 
5£*e£tU y " 2 = x " 3 + ax + bT^$tU 7tG 
tt. *P9ftiWE±K:*fiEU G= (xO, yO) T'SS 

*B8*GF (p) ±fC#fiet«SQftgajttfeBt»-r*# 10 
ST?»oT. ^&£8&tl£ t^OT&U, fro, t * 
4 X a (mod p) l±. 3ft$Tp 4:JttRLTffiR*W 

£ v \ 4: v > e> 4u 

fflf.Et<Drt5*-*&' fttfb' jRfc^-^JK 
-< > h5SG 1 4; Soffit" S^MTC'&oT. 
a' =aXt"4, 
b' =bxt "6, 
x t 0 = t * 2XxO, 

ytO = t *3XyO, 20 
*P3fflB»E 1 1*. fP»GF (p) ±Tfft«S*U y' 
"2 = x' *3 +a' Xx' +b' T'^StU x 
tO. ytOli * *l-?*l5tG t OxfflRtt. yJE&flUl 
7fcS«Rffii»*ffi¥«4:, 

ffl»ffi$n^7>t-^a' fttfb' TcGt4:$: 
RffiMSB&BK. 

C»*3(2 ] p 14, l 6 o tf y hdRBrefc y , 
IWSHftflHKBW^Rtt. t"4Xa (mod p) 
#3 2tfy NOT©8ttCfc*, t^^*ffS:»fc-rS^ 30 
C t - 4: £43$t4: fSflfeW* 1 ie«<Z>flrR 



(mod p) #-3i:fcS, £^o3kft%:ffifc-tm& 

T,. «JJBtt£-3 4:U «BWKW<D<tJCo^T»4. iff 

T=t"4Xa (mod p) 40 

•tz.£iz£>). ms&i&t*:mtt&z.£.&imt.-t&. 

1 33*®* RffiM^g. 
[|*#E5] lo<Ofl|Rft»ES:SQftLTflacDlo© 
ffiRffii^E t &£j^S*RffiM8&Bai4:, 
frffRffiir^E t *#J«*fi3plBSS4:#e>fcS*Rlfi«i 

twaflMBattt, m i tfj*^s4:ts 1 4:fM# 



taia» 1 ffi*^ai±. ^pi:, «ro»e<z>^^- 

* afttfA^*-* b fc. ^-xsKW> S4:LT©7sG 
4: S:iWaWRiaMS8ft3S«/N£ti* U 
33T% flFRj&WEli, ^PSftGF (p) ±nj&fe 

tu 

y"2 = x"3 + ax + b T'3s£*u 
TcGti, flFRffi»E±»C#iSEU G= (xO, yO) T' 

RfflttE®^*--* a'XtfrC^*-* bfc. TtGfcS: 

ffiKffiftB&PRtt^Stt. *PI#GF (p) ±(C#&t 

3$AfigRttt. t*ot*»J, t"4x 
a (mod p) it. m&v timisTftmtf'bi* 
V\ 4:^-5&ft«:i»U 

wiB«Rfflawffi^ai4. lui^f $^f-g3n^t £ 

J§V*T, &3£fCfc*J. tiFRtt»E t©rC9*-* a' ft 
tfb' 4:, fffe^-^^htLTCDJcGt 4:£g 

a' = a X t " 4. 
b' =bxt "6, 
x t 0 = t * 2XxO, 
y t 0 = t "3XyO, 

ZZ.T\ *fRffii?£Et«, WP&ftGF (p) ±T*5£g£ 
*U 

y' "2 = x* "3 +a' Xx' +b* T'&2 
*U 

x t 0. y t O ^-tl-ftlTcG t 0xiff, yffiff 

«(K*2ata^BH4. tfflBJKfJSftfe/W-^a' ft 
tfb' 4:, TcGtfcfettflBfOfflSB^aiAU 
afflBfclSfl^Ktt, WEffiAStuL/W-^a' ft 
b' 4:, TGGt 4:&£feU 

a' &tfb\4:T£*S«Rffitt4:, >h 4: 

LT®7cGti:S:ffl^T. ^P&ftGF (p) ±7*fStS& 
*i4*Ria«±T?©iRWJC»3*, Hf£ftfSP<3gI?:££ 
'tt©^!i4:1-S0r§-. -ri/'^;L^ 

6 ] p fct. 1 6 0 tl'-y h <DmmX'2b V , 
t?IH^m^^ff^© ti, t * 4 x a (mod p) 
^3 2 \Z V hJKT«H»fC*S, 4:^-5^ffS:»fc-«®i 
t S:«l»-r 5 3 4: $:#^4: 1" Sff *S 5 IBffOttR 

[fl#£7] Suie'3^^S[^f#S{^ t"4Xa 
(mod p) t!) ? -3 4:^S. i:»rOft#S:8lfe-raBft 
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T = t " 4 X a (mo d p) 
£^o 3kiBrvffif=.1rfrE o ^SrWg-T 5 3 i: £ »J & 

ft 5 IBScCDTf RffisgflJS :>7.^A. 

mm&^&t.'m 2 a#j#s t 1 ocwrwi 
aaa«g«^ei, tfr!a^£ftfc«Hia«Etfc5i«i/ 

* a&£>7^*-£ bfc, yh£LX<DfcG 
III'. *P9llM*Eli. ^PBftGF (p) ±T'^$ 

tu 

y * 2 = x " 3 + a x + bT'^$tU 
TtGtt. *Rft»E±K:flpeEL. G= (xO, yO) T' 



*Ktt. »gf (p) _wc#se-$- 

a (mod p) ti, JBRptJtRLTffiSIWVI^S 

i5I5«Rffi^m^©{i, iu§EJ&#$*v£^&GgS[t & 

JSV*T. ?fc«JCj:y, WRffiMlE t©^*-* a' X 

tfb' TcGtfc&JttBU 

a' = a X t * 4, 

b' =bxt *6. 

xtO = t " 2 Xx 0, 

y t 0 = t " 3 X y 0, 

ZZ.X\ JftRffittEttt. WP&ftGF (p) ±TJHS3 

*u 

y' "2 = x' "3 
x t 0, ytOll -tn-ftlTBG t cDxM^fi, 

tfb" fc. 7cGti:S:MffifiJMK«'saj*L. 
t>'b' fc, TfcGtfc&gfcU 
a' fclfb' fcTj£*5«Ria»i: 



+ a' xx' +b' T'^$ 



LT®7fcGtfc«:J§V\T. >£PBH$G F (p) ±T'^$ 
*i«*Riaji§U:T©atIWClS^$. iSfiKtfl&rafflfc^ 

are, fy^n*. t^'* ;uf 
0] 1 offlfliRfiaE *saftUT4«sn 

IfRffiME t©;\7>(-^ a* &tfb' fc. K-Xstf-f 
> h £ LTCOtcG t £fagLTV>Sfl3W?ai:. 
10 pi:. fyfafBlSLT^£/\'5*-* a' Rtfb' £Xfc 
*5flfRfflSi:, ^-7.^yV£LX(DrtCt£^ 
HT, (p) ±T**||S*i*afR|ffiMLhT© 

^ are. ^^^^^lixttus^ 

fcff-i 

t&iettRiiffi!3E&&Ktt. vsmmm^Bu *fRffi» . 
20 pjd3Hsre*y, 

WRiftiWEti. ^PS#GF (p) ±T?ft«S*U y " 2 

= x' 3Tax+bT'S$tU 
"C-^sKW V£LXV>5zGti\ flfRffl»E±KflqS 
U G= (xO, yO) T'SI£*U 

«HE38»flssaiw#®ti. #p&#gf ( P > ±iz&&t 

T*)»J. A^o, t *4Xa (mod p) It. ff&v 

30 fflVNT. ?^JCj:y, *HfflB»Et©/*7*-*a i "" , ( R 

a' =axt "4. 
b' = b X t " 6, 
x t 0 = t * 2Xx 0. 
y t 0 = t " 3XyO, 
ZZ.T\ «Rft»Etl4. 
n. y' * 2 = x' 

40 xtO. ytOti. -c-n-rtVTtiGtOxM^ffi. yM^ 
BWSfi 11] 1 o©>ff RffilgE Z%mUTtii<Z) 1 o 

®«Ria»E t &Sfie , r6*Rfiag8ft*fitT?*oT. 

#MWfr6, «»pt. «Rfi»E©^5^-*aXUf^ 
7^-c?bi;, K-^,K>-< h £ LXtDfiG £ Z%i9t 
S^f-^T'SoT, ffiRffi^gEtt. *PI^GF (p) 
±T'^$tu y"2 = x*3 + ax + b T'*$tU tx 
Gti. WRffi,^E±(C#^U G= (xO, yO) 

50 *iwiccf ( P ) ±iz&&?zm%imt nm-roT. 



mmGF ( P ) ±Tja»s 

3 +a' xx' tb' T*5fe 



t-v^&oT. SSJWHBtUi. t*OT?&y, fr-o. 
t*4Xa (mod p) {+ Hj&p timLXMM 

-f > h £ UTOtcG 1 £ fe»fflt5^f?/ yt'feoT. 
a' =aXt "4, 
b' = b X t " 6, 

xtO = t ' 2XxO, 10 
y t 0 = t * 3Xy O, 

flfRllWEtH ^PSflcGF (p) ±T?£*te*u 
y' *2 = x' "3 + a" Xx' +b* 
tU xtO, y.tOfcfc *4X-f*l76GtCDxffiiMiL y 

12] 1 Otftff RfifcSgE LTftflO 1 o 
<Z>*fRf8ifcgE t Sr^fiJWSflfraiftiMam^n^AfelB 20 

T, 

■5*-* b i:. K-x^ > h i: LT©3xG £ 5rSff-r 
S^r-yyT'fe^T, ffRffii?&E{±. WPS#GF (p) 
-hTfjeHSfl, y " 2=x * 3 + ax + bT'^StU 7C 
Gtt. *Hffi*E±»C#fcU G- (xO, yO) 

*MH*G F ( p ) JifCflfflE'f SSESKHR t &mt & 7. 30 
r^^oT. m&€m.t& ttfcOT?**;, 7^0, 
t"4Xa (mod p){£ fggfcp fc±fc«tTffi» 

-f > h £ LX<DfcG t £ S:J|ffi-r*^T- y ^ot, 
a' = a X t * 4, 
b* = b X t " 6, 

xt0 = t*2xx0, 40 
ytO = t " 3 X y 0, fitRffijj&E t (4. m^G F 
(p) -htrJt^tu y' "2 = x' "3 +a* 
Xx" -f-b* T-gtZtU xtO, ytOti. ^tl^tl^i 
G t ®xISf, yffiSfirr?&5« Rffittjfttuf^ ^ 
£. 

f^^§^ga^$l^£:A^*-*a , &tfb' TcGtfcfe 

^Mi^m*f a m*^T"y -?£ zsttz. £ *%m£^& 

[0001] 50 



(4) «8B¥ 1 1 -3 1 6 542 

6 

[0002] 

[aasffltttfi] i. £ti8MPere 

&feft®zmbtz£&<mmzmjt$j?ftT*&z. t 
[0003] in&^s^fl^nsxtt^y*;^* 



«*y, flcw^isafijcrs^ QHHtggtt&M-r 

[0 0 0 4] i(^|«8l^®se±ffi<z)«^i: UT1BR 

4frzi-7V~jvm "7 ny*. ±yA7 t 

^U-f 7>K ^'J^h^fc-T (Neal Koblitz, " 
A Course in Number theory and Cryptography", Spri 
nger-Verlag, 1987) {C# U < & *it^*. 

2. nnm^<Dm&mmm 

[0 0 0 5] ttHSillU:(Wmi||^ll E (GF 

(P) ) &*PI#GF (p) ±TJg«Stlfe«fgflS»fc 

(Stl) Y = x*G 

[0 0 0 6] p»««JC GF (p) ItpmcDK 

tcg & x mmn-t a z t srsft-rs. 

x*G=G+G+G+- • • +G 

&<co7bzm?z>mmGF ( P ) (c^lt, ±isp^s 
3. nnm^t.(Dm^mmm^mmht^)\y^)im 
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^T. SMS"**. 

[0 0 0 7] i©0tt. ±iax;b73*v;i^^{C s }:57 : -*i/ 

A110, tf=S-te>* 1 2 O&tfa.— tfB 1 3 0(2, * 

(p) ±<7)ltRffif*?:Ei:-t-5. E0^-^>h^ 
Gib, E0)£!fc£q£:-rS o oi»J. qti. 
(312) q*G = 0 

[ooo8] xmm. ymmt^z°°T'&z 

(oo, oo) &j&pg&&£VM,v OX'^-f. # 

Ttj ©an***:-*-. 

(1) «fe>* 1 2 0£J:54Hi(tffl£rit 

12 0it ^sbma^tlX^^=L— \f A 1 1 
OfflSfflHBxASrJSwr, 5£3Kti£oT, a. — tf A 1 1 
0tffc2if?g^YA3:£f&-f5 Uf-^S14 1~S14 
2) . 

(3£3) Y A= x A * G * 



*r©t. ^t>^ 1 2 Oil Hgfcp, flFRfijiEXOC 
^-J*^ > S G £ AA^* - * LT^HgL, 

ffiOn-ifB 1 3 OlCn-+rA 1 1 OCD^^glY 
A£4iHrf© U^'V^S 1 4 3~S 1 4 4) . 
[0 0 0 9] (2) a.— if A 1 1 0JCJ:5»64dE 
i-ifAl l Ott. SL&kfc^-f-S U^-yysi4 
5) . zl— tfAl 1 0&, 
(5t4) Rl = (rx, ry)=k*G 
SrtWL Uf-^S 14 6), 
10 &5) sXk=m+rxXxA (mod q) 
^■b. s Zim?Z> U-ry^S 14 7),. m 
»*, =L— tfA 1 1 Oj&tL-" tf B 1 3 0"\i£{fT£;* .yt 

[0 0 10] $f>iC, a— tfAHOti. »e>*l£ (R 
1. s) feSs&iiL/T^yfe-^xnfcfc^fC, a— tfB 
13 0A3ffs Ur7ySH8) „ 

(3) a.-ifB 1 3 0tCj:5*&SfflE 
a.— tfB 13 01*. 

(316) s * R 1 =m* G+ r x * YA 

=l— tf A 1 1 0©#fc$:5tig-tS Ur-v^S 1 4 
9) . i«i 



s *R1= { ( (m+rxXxA) /k) xk) *G 
= (m+rxXxA) *G 
=m*G+ (rxXxA) *G 
=m* G+ r x * YA 



4. *IRft^<Z)*©;&[j$f, 2{gg<Z>ftjrc:j:£tf?UI 

jst sfettSEro-fn-rftjcij^T, « raffle 

art" T X A*Gj , 3S4"CaV?* Tk*Gj , ^6(C^-f 
Ts*Rlj, r m *Gj , r rx *YAj teu WRffi 

[0 0 11] *Hffl»M)«*i^lCo^Ttt, "Efficie 
nt elliptic curve exponentiation" (Miyaji, Ono, an 
d Cohen^r, Advances in cryptology-proceedings of I 
CICS'97, Lecture notes incomputer science, 1997, 

Springer-verlag, 282-290.) fCpL <|&9!£ftT^ 
S. 

[0012] ffiHm&cDwmv&iz-D^T. uTizmm 

flfRttttO*ffi*S y * 2 = x"3 +aX 
x + b tU ffiKO^PCDJ^RS (x 1 , y 1 ) 
U fiSEO^QOftSS: (x2, y2) 33 
T\ R=P + QT?j£*S.*R©&«3: (x3, y3) 

[0 0 13] fcfc. ifflraaWCS^T. IB#"}i. 
*®W»S^U 2*3 fi. 2X2X2 

■To. P-Q<7)^ R = P + Q«, 



30 



2-x 1 



(x 1 -X 



x3= { (y 2-y 1) / (x2-x 1) ) 
-x 2 

y3= { (y2-y 1) / (x2-xl) } 
3) -yl 

P = Q©##, R=P + Q = P + P=2XPi:/ J ;tJ, R 
=P+Qte. 24B»ffl»*i:fc5. 2«Jt©4^CS:J!stT 

[00 14] 

x3= { (3x 1 * 2 + a) /2y 1} "2-2x1 
y 3= { (3x1 * 2 + a) /2y 1} (xl-x3) 
-y 1 

40 M#T'S6„ ±IB{CS1-«k-ptC, 2g«BSSilT*S7:7 
mtcot, l[HlO*|5S^±Oa^t^[^^i:^s 0 - 

mmtevmasmit. mm±xomnsmt 
[0015] ?zT\ im&zmm-zztzBfttL 

Jg&ttU:tt. 3I1MX, Y, Z*»&&6liOii:Tft 
oT. MS (X, Y, Z) tmm. (X* , Y' , Z' ) 
i:{C*fLT. feS»n*«fiPSLT. X' =nX. Y' = 



50 



(6) 
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nY, Z' -nZfc5BS0foW&<&&e>tf. (X, Y, 
Z) = (x- , Y- , Z' ) fc-i-S*OT?»S. 
COO 1 6] 770« (x, y) tMiMU (X, 
Y, Z) fcfi, 

(x, y) - ( x , y, 1) 
(X, Y, Z) - (X/Y, Y/Z) (Z*0©£: 

^S2©-oo7B*^-ratg, si^s2i:SiB-r 10 

So 

[0 0 l 7] j^T, ffBOMkOSWUu 

©floats zmmz^xwitz. zm<7y^ 

5*, 2fgd^i:^S(Dfes^(DT'fe€> 0 WB^iRir 
tt. WBfiaJLL©j&©anJS. 2«j|w>aoica|R»jSLK: 

mora. ffirafti^©y\-^^-^{ciR#-r-g>. 20 

[0 0 18] i^-ei*. pSl 6 Olfy haWRtU 
*R»GF (p) ±®«RiaaiSE : y * 2 = x" 
3 +ax+b £U =WR^SE±©7t;P, Q£-£4x 
-?*U P= (XI, Yl, Zl) , Q= (X2, Y 
2, Z2) H3t+£le. 
R= (X3, Y3, Z3) =P + Q 

[0 0 19] (i) P^Q<Z)^ 

(step 1-1) c£«fit©ffji: 30 

(3*8) U1=X1XZ2'2 

(3*9) U2=X2 XZ 1 * 2 

(St 10) S1=Y1XZ2'3 

(3*1 1) S 2 = Y2XZ 1 " 3 

(S12) H = U2-U1 

®13) r = S2-Sl 

(step 1-2) R= (X3, Y3, Z3) ©ft* 

®H) X3=-H* 3-2XU1XH" 2 + r " 40 
2 

(3*15) Y3=-S1XH* 3 + rX (U1XH* 
2-X3) 

(3*16) Z3=Z1XZ2XH 
(ii) P = Q©i§1^ (t&fc*., R=2P) 

3©^, 2ffiPJ(CC!)aai:*5. 

[0020] (step 2-D <$rm.(ntm 

(3*1 7) S = 4XX1XY1"2 
(5*18) M=3XX1 " 2 + aXZl " 4 50 
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(3*19) T = -2XS+M"2 
(step 2-2) R« (X3, Y3, Z3) ©ftg 

JKTSrtfjtt-s. 

(3*20) X3=T 

(3*21) Y3=-8XY 1 " 4+MX (S-T) 
(3*2 2) Z3 = 2XY1XZ1 

^xmm-?z a - 't. ^pi^gf (p) ±v>im<m 

»CJ:*tflttS:lMul, 1 0© 2*H«C J:Sff4Hfc 

S:iSqt'^t. — ^©v^PT/n-fey-y-tcfc 

UTtt. lSq = 0. 8MulT*4. 

[0 0 2 1] ±ia©M{c«fcsi:» P*Qffl#&f;^$n 
T V ^«P3ffi^©;to3l©ftg:fitt. 8 ~5* 1 6 (Cfe 

wr, ^©(iBgcst>'2^©[Hi^i&^^>s-rs3t 

{C«fcU#fbtU 1 2Mu 1+4 S ^ftii, 3* 

8. 9, 10, li, 14. 15, 1 etZSlrt&imn 
ftPSl*. -S-tt-?tU 1 Mu 1 + lSq, lMul + 1 
Sq, 2Mul, 2Mul, 2Mul + 2Sq, 2Mu 

i, 2Mu i -e*sii:*»e)We)*»T*s. 

JO 0 2 2] ±EfflffiKC«fcSi:. P = Q©^-{C 

3*2 2(Cfcl,vr, ft^[©[llimt>*2^»:©lll^[$:^^> 
hfSdfcfCiyff&ift. 4Mu 1 + 6 S qTJbfi, ~ 
Jltt. S17, 18, 19, 2 1, 2 2K.t3lrt&2tim. 
©ftHXtt, -Ztl&U lMul+lSq, lMu 1 + 
3Sq, 1 S q, lMul + lSq, lMulf^Z 

[0 0 2 3] ±iasg[©^^> MC;fcV%T, 

li. 3*1 4©H * 3fCO(^Tte. 
H * 3 =H * 2 X H 

fcSMT?£ *©"??, H " 3©ff**i, lMul + lS 
qt U 3*1 8©Z 1 * 4 JCOI^TS, 
Z 1 " 4= (Z 1 " 2) " 2 

tawrc^s©-*?, z 1 - 4 ©ff-niji. 2sqtt 

So 

[0 0 2 4] 3*1 4 ©H " 2CoV*TUU ffftg© 

H * 3©fm©yni2^(C33VNT, H " 2*«»:ajSixT 

^S©T*, H * 2©ft3SSte|fM;t7?>hL&V\ $ 

SW©IIIK©*tf:/h©|B. abSfflfC/jNStMBSjg 
UT^f*>*i*5R||W)|lBR{4. **:/NUfcV\, -£-©3lE& 
ZWTlZ.Wffi-tZ>. Z^X'So/i^^mta. 3*8-3* 
2 2iCfe^T, SS^©^£&5/h$^@^{4T-&U, 
A»««CJi. 2, 3, 4, 8fc£©tt"7?*$. 3*1 <b© 
ffltt. #<tt»4^h©2iSST?3^T*S. 
■?-©ftfi©3E»«U ilS. 1 6 0 tfy h©ffln&;ff LTV* 
3. 

[0 0 2 5] — fljBc, V-firo^n-fe-y-y-JCfeVxT, A 

«*:«»»£©*»*, «S»©^7hfcinJK)»yig 
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fi-T«fi«tC-i!rt-5J:^JC, ii^^i/7hLT, 1 
oOTfcTy h?iJ6*#-5„ ^$[tf>±fc:'-y MCo^T, ICOj: 
UTff fcttfe^fc < £ x; 1 o©fc:'-y hyiJSr-t^Tftl 

jw*. 

[0 0 2 6] Ixll 1 6 0 fc:'>y h©^S[i: 1 6 0 \£v 
KOtBSRfctfMWKlSV^Ttt. 1 6 0 ti'-y SOj&RKIt 
616 0EI2/7 hU 16 OflOlfy hJ'J£?#. 
fe 1 6 0«©tfy h *J&;&0j«-S. 4 fc^-y 

1 6 0 t^y hOSiU[^©S|[(:j3MTIt 16 0 10 
^ v V- <D$m&%: 41i/7hU 4 m<D t'-y h 

[00 27] £JB±, ±ig{C^-f J: O (C LT*5feftS0 

JHBiiJ**: v * i: B^-frS ©T?. *JT©|B|Slttc * >7 > h L 

(j£2 3) 4Xa"3 + 27Xb"2 
mR2tlt-a. bSJUv^T. *fRM£E : y " 2 
= x"3 +aXx+b il-T-Sc 20 

[0029] (step 2) «reic«Lfe*Rifiiare*sa> 

^^^&W©»Rfii»E(3!>7C®fi8»#E (GF (p) ) 
(&frl) #E (GF (p) ) #*gfcaRRTfJ»J« 

(Sfett2) #E (GF (p) ) - (p + 1) * 
0, - 1 T'fe^#^iC, #P3fi^E5:fi?ffl-r-5„ 

step ItCjfoT, 8%. ««®«Rffl«©3Wli:. flte 
t&tMi&t. 30 

[0 0 3 0] 

KU flfRlfiiK®^* - * a UTHJfeWtC/jNS w«S 

[0 0 3 1] JJEKil^UjyfRffiiliSKMKR 

fc. «RlB»©^^-#ai:OT/hStMaS:aHRT** 40 
^ £ ttK &r . Ifltt&IMWT?* fc^ £ ^ 3 

U *(^R^T?®«i»«:B!l»t*fe«)*Cl4, «£ 

[0 0 3 2] ±IBJC^-iTJffl.AS:»ftU BfiF 

m&Z. iOWRfiS»i:«lf*S^iSS:*U fro, it 
« SBD«T^ **R«»K:SBft-r 5*R 

m. WRffissafcj&is. &tfWRffl»3H&/n*7A$: 
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♦ St 18 (CI J, fllRffii*©^*-* a#£ 

sfttV^, Z.OW 1 ?*-* aOM£ LT. /In 

s^fcsus-r**:. *Ria»±©2«iiw>ff«»*. 

lMu 3Mul + 6Sqfc*:o. &33, 

jDJUcHLTtt, ft Rffi*S<ZV\*5* - * fcJtftSitT 

5. WUiaLfefllRSftBkJDiW? 

-f fcfi. ^©f^SfCO^Tli, TiEEE P1363 Worki 
ngdraftj (1 99 7^2^6B. IEEEfgfr) IZ 

[0 0 2 8] Bgr#{CilLfc«Rfisg{3U &TF<D*-TVf 

(step 1) fil!®ffRffiH<Z>a»R 

^PSftG F ( p ) ±©ffiKffl * - * a . b 

a. b»±. ^2 3&afcu ptdaiasrt?**. 

#=0 (mod p) 
[0 0 3 3] 

£»{C. *?B9!t*. lo©*R|fiiSE«:SQ£UTte<J!>l 
o®«Rffl»E t S:*filt-rsfllRiBia3Q»BatT?fto 
T, iWRpi:. «Rft»E©/^^-*a& 

O'A^^-^bi:. ^-X,K>-< btLT(DfcGt^ 
ff-tS^ST-feoT. 4iRffi«REUu ^PS^G F (p) 
±T'^$tU y*2 = x"3 + ax + b T'^^tU 5c 
Gtt. «RlB»E±lbaqflEU G- (xO, yO) T'^ 
tPSftGF (p)'±fC#ft"TSSQft 

ft»t €:«tf»"r*^a-e*oT, s&kti&tt t*. ' t * o 

T'fe'J^ *»0, t "4Xa (mod p) li, 

lC«fcU. ^Rft^EtO;^^-^ a' X^b' ff 

a' =axt*4, b' = b X t " 6, xt0 = : " 2 
Xx 0. ytO = t"3XyO, flf Rfi^E 1 1£ ^PS 
#GF <p) ±T?jaiS*V y' '2 = x' "3 
+ a' xx' +b' T'SiZtU xtO, ytOlt 

rs. 

[0 0 3 4] lit-, p Ji, 160 tfy h(7)^grC'$> 
SuiE^i^S^Sii, t ■ 4 x a (mo d 
p) *«3 2¥y h^T®»lC«:S, fcvx-5^&«fe-r 
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SStSBt t S:St»1-$ J: o izm& L T J: v 
t&iSQ&^R&W^gtt. t * 4 x a (mod p) 
3 i: ^^£»fe*-gQft«Rt fclcfM" 

CO 0 3 5] 3IT-, fffi3^flH8HK»3$Ui. ^KT 

=t*4Xa (mod p) £vvJ*fe#«:jtfei-#£ 

1 o©f|Rffl»E Zm&LTtiXD 1 OCAff RffijjgE t £ 
^•fSHRffli^^Mi:, £j*a*ifc«FRia»E t 
£f! JSf £f 'JMSSi: # 6*** RffiMffilffi i/^fAT' 

ji^wluzmtl. mmim&mt* jwspt. *r 

IIT'. fjfRgJ^Ete. ;&PBH$GF (p) ±T'>£^$ 2 
*U y * 2 = x * 3 + ax + bfS3n, 5*G14. 
l»»E±JC#fiEU G= (xO, yO) TTSlSft, g&fS 

^2gff¥IStt, flfflB8U§£Bfr*>. Ml&pi:. fliRffi 
ME©rC5*-#a&OW*-*b£, tcG i: £g-ff 
U fl3l3Ggt0i(g!ffltfff#g!tt > *pg&GF (p) ±(C# 

*=OT'&>J, t5o, t*4Xa (mod p) 14. * 

T. &5£fC«fc'J, «R«gEt©A7^-^a' 3( 
b* £. fffe&^-^sK-OhfcLTfflTttGtt&Kffi 
U a' =axt "4, b* = bxt"6, xt0 = t 
~ 2 X x 0. ytO = t*3XyO, IIT\ fgRftifcg 
Ettt. mmGF (p) ±T*^ga y' - 2 = 
x' *3 + a' Xx' +b' T'^ISft. xtO, yt 

1331 2 £^#18(4, tfriEJKBSJifcrC^-dra' 

ffl^att, iwsai*s*ifc^5^-* a' jRtfb' t. 

^GttS:35fllU t&IE#J##g»i. *8Rpfc. ifgg 40 
fcLfcA^-^a' &tfb' £T'£££;ftR|ffigi;. 

>h 4: LT©7cGtfc&J§^7\ ;gps#GF 

(p) ±"e^ana«Rfl*SLfcT?fflai»{c3fitj«. n 

to. 

CO 0 3 6] 3B2afl|#ai:SHftfiHR 
1 o©*f RffiifflE SrSQftLTffllfl!) 1 o©« RfigE t £ 
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m 1 1 %.m=&Ltmm=%Lt m 

IW2»lffi*#Sl4, jaitpfc. ffRE&l&EODA^ 
*-*a&l&r?5*-*bfc, ^-^Jff-f>htUT© 
SGi:S:«il3«Rft«aS^BI«^ffi*U IIT'. ffPJ 
ffiffiEt*. ^PS^GF (p) ±T**SiT, y * 2 = x 

" 3 + ax + bT'3t£*U ^GJ4. «Rffi?^E±tC#S 
U G= (xO, yO) T'^^tU fui2SH2gff#|g 

.»*. iai»jffi»«^e>, iipi:. *Rffli»E©A5^ 

10 - * a &Z>V^ * - * b t. fhG£tt%mu fflESBft 
ffiSWt»#«tt. ^PS#:GF (p) ±fC#£-f5^M 

fro. t*4Xa (mod p) Jt. 3R»p fcJtlRL, 

t*sb«w%sv\ i:^e>^&^u usssttHmamsi 

U. »SEtffl;\*7^-^a' ^'b' t, jcG t 
fc&UCffiU a' =aXt*4, b' -bxt'6. x 
tO = t"2XxO, ytO = t'3XyO, IIT\ 
WRfflttEttt, WPSflJGF (p) ±T?j£Hi*tu y' 
20 "2 = x' "3 +a' Xx' +b' T-mttU x 
t0, y t Olt. .-ftl-PtlTcGtflDxaESJffl. ylSl 

tuf2^2ai^7#iai4, «iisjWBs*ifcA5^- 
tfb- ybGtt^mu mmm^mi$. mm 

Rffi^t. W h 41 LTOthG t £ £J§V \T. 

^ps^gf ( P ) ±T'7£mztizifflm&±T'<Dwmiz 

ii:S#aito 0 

CO 0 3 7] 

LTC7)«Rffif^^g2 0 OtCotvC, HI^SVNTUi 

1 . ftftmmgggm. 200 cd^s 

-^SflSP2 1 0. S3ftfiHBffl!^§8|S2 2 0, ^(ffRffi 
i^aiSP230, ^5^-*iSffi»24 OfrfcflMtefl 

s. 

^N*^^-^^ffSP2 1 0) A5*-#g{fgp2 1 0 
i^U ^SPO^«7b^. «RffiBW)A^-*a. b<b. 
BuiS^Rffl^iiOTtGi:, ^pil^-ff-f-So II 
T, p 14, 16 0 h©3BJBFe&S. 
CO 0 3 8] mrfg^SPO^gtctt. d»BMm&^ir^ 

J4. ^S§g|5f -i-CD^f±omg5 £ UTflfRfiMLh©«R 
«!KHEB*ffl^r*y. MSB«fRiiSSl£J&UTv*5. I 
IT'. «PS«cGF (p) ±Offig{C^$n^t5fE^fR 




15 

ftisgn E : y " 2 = x * 3 +ax + b Urnl* 

*u iufgTcG^ i^Ri&$g©&«£#ii&£*u 

G= (xO, yO) 

(gen^^fgis 220) msemmm 22011 h 

.3tCjS*\fc^KU MST (i) (i) 
n i = 0. 1. 2. 3. 4©££. -tn-fn. -3, 

1. -1. 2, -2©fflfe;r*5. gg^T (i) 

n i = 5, 6s Is 8, 9, 10. 11, • • • (Dh 
i*s 3. 4, -4, 5, -5, 6, -6, • • • ©fgS: 

[0 0 3 9] S»«mtffKlS2 2 OH i =0 
T. i©#£l^oJngL/-2:#£, 

(5K24) -2"31 + 1ST (i) S2"31-l 
O:\Mt-\ss fr-Os 

(S2 5) T(i)=t"4Xa (mod p) 
t45««tt-Sot. ^PBftGF (p) ±(DtgT- 

[0 04 0] 3$24n T (i) #3 2fcfyh 

§£T (i) n i = 0<Dtz*lZs -3 ©{«£;£ UTS 

y. $mem%tim2 2 on i = o^e,^«>t. i© 

1 T oflnlfL&tf^ SUKT (i) ©fflSaWfWS 

©t-. *ajtc-3©«*«#flasn*. 

[0 04 1] §§8J[T (i) its i=Q<D£\*\Zs 

#ai§i5 2 3 o) smmm&umz 3 on -§p&&g 

F (p) ±E*|*Sft*3Hft«Rffli»E try' * 2 
= x' " 3 +a' Xx' H-b' ©;^*-#a* . 
b* ^n^m^iZLXs JTffi-fS. 

(3J2 6) a' = a X t " 4 

GS2 7) b' =bxt " 6 
*£. ^ffRffi^aJSf2 3 on 7cGlCS«6-rs3C 
#^fRft^Et_h©7t;Gt= (xtO, ytO) &7£© 

(:£2 8) x t 0 = t " 2xx0 
9) yt0 = t"3xy0 
*Rft»E±©ffiR©.&tt, J^Lh©<fce>{CLT* 
a' . b* "P3£*SSaJWfRft»E 
t_t©i,Ai:3H83*i*. 

(^*-*i£flSffi2 4 0) /N'^^-^^{iiSl52 4 0 
a' . b' t. 7tGt (xtO, ytO) tZffiiiM-B 
2. ffRffift8S££B2 0 0a)gftff: 

<«R«i8aQffiea2oo©^#©»f^) tiRffiiMs^i 




(9) <&m* 1 1-3 1 6 54 2 

16 

[0042] a^*-*^isp2 1 on tm<ffim* 

<i>mm.p£.s Hm&&E<D/i5*-* a&Xfb 
m. 'J Uf - 7^S3 0 1). iuf BW Rl»MLfc©7cG 

»^3t* Ufv^s3 0 2) . mzs mmmtmn 

2 On SfiftfiSRt&JSiBL Uf7^S3 0 3) t se 
SWfRflttMKfi»2 3 0ti. «PH*GF (p) ±fC«* 
S*iSSBft«Ra»E tffl/^^-^a' , b' tg 
GfC#/S"*-53Qfcfl|RfflttE t±©^G t = (x t 0, 
ytO) fcgfflL Uf*;^S3 0 4). yC9*-*S 
10 ffi§P2 4 0 n ft(^ffl£ft&2BftmRft»E t ©A? 
*-*a' . b' fc. 76G t (xtO. ytO) tariff 
l3^8P©SS«'NSfli-*-S U5=- 7^S3 0 5) . 

asaftffissBtfWP2 2o©«f^) &ic. aa^Msmm 

[0 0 4 3] S&fli$ffltfm2 2 0tt. ifCO©{I£fg 

fc-rs Ur*^s3 ii)„ #ac. s^^sracff»2 

2 On MWL1 (i) (CO^T, 
— 2*31 + 1 ST (i) S2'31-l 
20 ^ilfe-r^ifo^^'MU »£;*fcv«fce>tf (AT? 
7S3 1 2) , *Q31£*rr-f-5. »fc-rfc€>tf U-f v 
^S3 12). 

T ( i ) = t " 4 X a (mod p ) 

i:^«iat&iaiL u-fy-^s3 1 3) , nm 

SnfcSQftfiaRt*^|»fl-GF (p) ±©7Cl?*S*^ 
e>fr£¥!lj£U "tBSflsGF (p) _h©^T'g>oJfc'b (7. 
f7yS3 14) , «Sl&i»T+«. *PS#GF (p) 
±©tcT3&v>*6 Ur7^S3 14) , ifClSrJnSE 
b U-ry^S 3 15), HEt^-r^S 3 1 ■ 2-NBHr 

30 £jf-r, 

0QS«RiaSiMiffi«P2 3 0CDiW^) 7&iC. g3gffR© 
tttlffiiS 2 3 0 ©IMftCoV B 6 (wTt7D -t 1 ^ 

[0044] SgmRffittgttffij- 23 011 «fiRftG F 
( P ) ±ICMDtSns3&ftffiRi&»E t © A*7 ^ - 9 
a' =aXt ^SrKffiL Uf77"S3 2 1) , 
*-* b' =bxt* B^ntH-T^ Uf?7*S 3 2 
2) . 3GftttR|f&»IICm8|S2 3 On TtGfC^ffi 

■t5^^ffR«^Et±©7r;Gt= (xtO, ytO) 
40 tLT. xt 0 = t * 2Xx0 5:^aiL Uf^T'S 3 

2 3). y t 0-t * 3 X y 0 &3S«fl-i-S (7>T7 7'S 

3 24) . 

3. a&tffRAffiE t fcflfRffi»E 
33T-n ^HffRfttRE t : y' *2 = x' " 3 + a 

X t " 4 X x' + b X t " 6 ts ffi Rffi^SE : y " 2 = 
x * 3 + axx+bfc«<nST?a&63^€:IE^-t«. * 
fe. fitTCfcHT, TfRftflLh©^n 77-<>lg 

©*©s3iyae». 

[0 04 5] «Rfi^E±©ftSf;©.#.P (xO, yO) 
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(5K3 0) yO * 2 = x0 * 3+aXx0+b * x 3 = { (y 2 - y 1 ) /. (x 2 - x 1 ) } " 2 - x 1 

SrWfcLTV**. ZOSBBCty. *Pii, ,6P' (x -x2 

0' , yO' ) = (t*2XxO, t'3XyO)Cf y 3 = ( (y 2 - y 1 ) / (x 2 - x 1 ) } (x 1 -x 

#!3*l-5o 3) -y i 

[0 0 4 6] 331*. 5S3 0 0(312(3, t " 6S*t}4 

^ [0 0 4 9] &{3. *»WT?«^fefl|RSfiEMM!«eft{Cj: 

t * 6XyO " 2 = t * 6XxO " 3 + t " 6XaXx »J. *RliBttEJb©j&P, *Q, ,£R#. ^n-f*U £ 

0 + t " 6Xb «HtP3S&aEt±©^P' . ,£Q' . *R' (C^$n 

tffi&tl*. 31CD5S&, fc<D£3lZ$B&T'%Z. 31317?. *P' , *Q' , *R' (DlMU 

(t * 3XyO) *2=(t*2XxO) " 3 + aXt 10 fc**v?4i, (xl' , y 1* ) . (x 2' , y 

* 4X (t * 2XxO) +bXt ' 6 2'), (x3* , y3' ) fcf*. Z\<D£% 

^©^4, S&JC. ft©J:i.tC35^TS«. xl" -t"2xxl 

[004 7] yO' *2=xO' '3 + aXt'4Xx yl'=t*3Xyl 

0' +bXt " 6 x2' =t * 2Xx2 

Ztlit. ,&P' mmR&mEt±lZ&ZZ£*:m y2' = t ' 3Xy2 

LT^S. *Rffi»E±©/SW*&iSft»Rft»E x3* =t"2x X 3 

t _ttf)*/\<Z)3£&WU y3' =t"3Xy3 

(x, y) — (x' , y' ) = (t " 2Xx, t * 3X tffiWfrD. 

y) _ [0 0 5 0] R" =P» +Q' fegu 

•t&mKPim*Et±<D.4up<onRm&E±'*D&<m. r" <Dm&z (x3-, y3-) t-rst. 

*i. ±83Q(W>aSQiT?JfeS3C4:l4**JC«*»S. x3" = { (y2' -yl' ) / (x2' -xl' ) } 

[004 8] Cx' , y' ) -» (x, y) = (x' / * 2-xl* -x2' 

(t * 2) , y' / (t * 3) ) y3" = { (y2' -y 1' ) / (x2' -xl* ) } 

&±<Dz.k.&e>, «raa»E±©j*i:aaft» HsmE t ( X r - X 3' ) - y v 

It. «Rffl»E±OffiSfflJW:*2 ( *P- (xl. y [0 0 5 1] 331T% 3CTC^xl' yl' , 

1) . Q= (x2, y2) fcHy, R-p + QfcU R x2' , y2' ^ Wffu _hiB<Z><fc 3 13, xl, y 

(x3, y3) fc-f*. 3KZ)££, tfffCi**fe 1, x2, y 2 £J§<,\T*1-fc % 

•fc^lC, *30 

x3" = {(f3Xy2-t"3Xyl)/(t'2Xx2 
-t'2Xxl)) " 2-t * 2Xx 1 -t ■ 2Xx 2 
= (t (y2-y 1) / (x2-x 1) } "2-t'2Xxl 
- t * 2 Xx 2 

= t " 2X { { (y 2-y 1) / (x2-x 1) } -2-X1-X2) 
= t " 2 Xx 3 
= x 3' 

y3" = { (t *3Xy2-t"3Xyl) / (t "2Xx2 

-t * 2Xx 1) } X (t " 2Xx 1-t * 2Xx3) 
- t * 3 Xy 1 

- {t (y2-yl) / (x2-xl) } Xt * 2 (xl-x3) 
- t * 3 Xy 1 

= t"3x {{ (y 2-y 1) / (x 2-xl) } x (xl-x3) 
-y 1} 

= t * 3 Xy 3 
= y 3' 

ftoT, R* £R- *U\£«:*l/r<r* P©^'3o^T. 2«4^ClCo^T. 

ZZttfftfrZ. ffirilBWtJC. *Rffl«E±©ftSffl.APfC#LT. 

[0 0 5 2] R±{3«ky, *Rffl^fflinlRR»4. * R-P + PtU *»WT?«v^fe« Rffi»KD3e£JC.fc 
S»{CS3<r\Tfc, #'3. Q= 50 y, «Rfifi*E_t0.&P, ,£R#, SQfttfR 



(11) 
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ZLZ.X\ *P. *R 
tU (xl, yl) 
1' ) . (x3" , 
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. MR' {c^^4xo=»Oi:-ro. 
. ,6P' . ,£R' (£j-g@S:xft-"r 
. (x3, y 3) , (x 1' , y 
y3' ) £?2>. Z.<Dt%. 
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x 1* = t 

yl' =t 

x 3' =t 

y 3* =t 



2Xx 1 
3 X y 1 
2 Xx 3 
3Xy 3 

R" = P' + P' t-rz. 

x 3" = { { (t * 2x3 x 1) 
- 2 X t * 2Xxl 

= t * 2 { (3x 1 * 2 + a) /y 1} 
= t * 2 { { (3 x 1 * 2 + a) /y 1} 
= t * 2 X x 3 

= {t (y2-y 1) / (x2-xl) } 
- t * 2 Xx 2 

= t * 2 {{(y2-yl)/(x2-xl)} 

-x 1 -x2} 
= t * 2 Xx 3 
= x 3' 



* (0 0 5 3] fe£U 33tC^l7o2fgig»i, 
RliaaEt±02iWI6St. *R" ©MS?: (x 
3" . y 3" ) ftZL. 

x3" = ((3xl' *2 + a)/2yl' ) "2-2 
x 1' 

y3" = {(3xl" *2 + a)/2yl' )■ (xl' 
-x3' ) -y 1' 

£&&. ZZ-X's xl' . yl' fc-ftl-etu xl, y 
1 2:Sv\TJiiaa)«fc^tca-ti:. 
2 + a)/(2xt"3Xyl)} "2 



2-t ' 2X2x1 

* 2-2x 1} 

* 2-t *2Xx 1 



y3' 



R' i:R' 



= ( ( (t "2x3x1) 

X (t * 2 Xx 1 - 1 * 2 

= t * 3 {(3x1*2 + 

- t " 3 Xy 1 

= t * 3 {((3x1*2 

= t " 3 X y 3 

= y 3' 



(0 0 5 4' fithicfcy, *Biffi^©2ffiS0Wu * 
fcdfc-cfcy, flfR-BBEi:. afs»(B-cfiv^Tfflv^*C 

4. -mvpjii&ttE t zm^z>mi$<Dtm-gL(Dvm 

-*a' It. 3 2f y hJ^TlC7&SJ;e){C]|Xf>tlo£D 
T». *-U8fflff*»i, 3Sqt&5 0 S£oT, flfRffl 
$&±<DtoW.(Dtm&lt. 1 2Mu 1 + 4 S q fcfc »J, 2 
^Of^*«, 3Mu 1 + 6 S q fcfcS. 
"C, flfRffittEO^-*-* a««, 1 6 0 fcfy MCjfiH 
tfT?*«^i:fca^Sfc2f«WCfeV^, lMul 

(0 0 5 5] ±iftZi&s<ti£olZ. m$$LT (i) tt. i 
= 0(D£&Z, -3®fflSr*ffLTV^Si":?a:Bfev^. ftfi 



2) 



" 2 + a) / (2Xt * 3 Xy 1) } 
Xx3)-t"3Xyl 
a)/2yl) (x 1 -x 3) 

+ a) /2yl) (xl-x3) -y 1} 



7b\ -3<DWr£. 5£l 8ttU 
M=3XX1 * 2 + a' XZ 1 * 4 
30 =3XX1*2-3XZ1*4 

= 3X (X1+Z1*2) X (Xl-Zl 

(0 0 5 6] W&O&AZIS^X. -SHfHUi, lMu 1 + 
1 S q (S6oT, #Rffli^±©ill*$©ft#*tt, 

1 2Mu 1+4 S q£fcy, 2^#Oft*¥*«. 4Mu 
l+4Sqta!5. ZLC^«ke>-C, fi&fctifctM"* t 2# 
JBCfc^T, 2 S q^©ft^*^i!(^T'So3 l t7bW 
3. iiStCize^^J:^^ Bf@£T (i) £. i = 0<Dt 
- 3 tf>te£;& l/T£ y , 2 2 0 

40 i=>0-^e>*6»T, i ©««: 1 -f -ytofchtaWii* 

mwlt (D ®as:*jwa-rs©-??. «*tj"c-3®«*** 
flasns. tot, 2^tcfe%^ ^toifciiT*2 

S q^©H«4^!(i^T'tS^/)\ &WO£SE£*i5 
<7)T% ftt^*53B^Ri^*&llIT«ffiT-***5]« 

[0 6 5 7] z\<nt-^ *m&&mmizjjktmmm 

5. ~33g#l 



(12) 



4f US 3 ? 1 1-316542 
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»*«ATfe»j. tireB£U&%£*Pi*. «ps#gf (?) 

(S3 1) -2*31 + Uu " 
5tf§SP2 2 Oli. tbu*^. 3S3 1 

[oo5 8] mmmmmz 2 o«. 5*3 1 siw 
mtmmm 2 2oit S3i ®«to y k, 

(5$3 2) u"4Xa (mod p)=-3 

6. ffiRfii^^g2 0 0(DiiMM 
±§BfCSMBLfe*nifai8ffiBI«2 0 0 $:^-t5ltft 

S. 

[0 0 5 9] rL— y* A 4 5 0, <g3I-te>#4 6 0&tf:x 
-~lfB4 7 0tt. *<y h*7-*T!6WStvr^6. 

(1) <tS-fe>^4 6 OfC^&ttRffiMkaSHR 
*3Hz>*4 60Wu IffiRp&HRU 3f|SB#GF 

(p) ±©*P3lfiWE«HRU ECD^-^sK-Ohfc 
G£U EWtidR&qi:-*-* Ur^S4 11). O 

(5&2) q*G=0 

[0 0 6 0] 3.ZLT'. E: y*2 = x"3 +a 
Xx + b T?*»J. G= (xO, yO) 
«B-fe>*4 6 0l±. P. E, G£ffRffi?J^|^S2 
0 O^ilffi-fS (Xff^S4 1 2) . 

[0 0 6 1] (2) «Hl&tt33fi£»2 0 0(CJ:£3Bft 
ffiRfflifcg<Z>£f?Sc 

* Rffi*S^g&£lfi2 0 0!t mmFi&^E t 

U 7cGtfc»fl-rs Uff^S4 2 1) . ZLZ1T% 

Et : y' * 2 = x' " 3 +a* Xx' +b" , 

a' =axt *4, 

b' =b x t * 6, 

Gt = (xtO, y t 0) , 

x t 0 = t ",2XxO, 

ytO = t*3XyO 

[0 0 6 2] <WC *fRfil§S»gg2 0 0l;t, Et, 
Gt £!rJI-fe>#4 6 O^m-rs Uf>^S4 2 
2) . 4 6 0(2. P, Et, Gtl^i-f 

'sizitfi-ra Ur-yyS4 13). 

O) =L-?iz£&m;i^m££ / Amm(D£j& 

n— !fA4 5 Ott. a5ffi»xAS|JB6L, Uff^S4 
0 1). i— if B 4 7 0 ti. Sffigtx B £!S3£-t5 U 
f'VyS4 3 1) . 
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*±£>7t;u (u*0) &7>^{CH^-r-5 0 J^tC. $m 
* flHKSI§ffi2 2 0Uu tSu#, 
4Xa (mo d p) <2 * 3 1-1 

[0 0 6 3] i-D"'A4 5 0(i fc^lCiy, £0§£Y 
ASJIffiU Uf'^S4 0 2) , 4W»|YA«:n— if 
B4 7 0Aj|iiit| ) (xf7yS4 0 3) s 
YA = xA* G t 

Sfe. n.--t?B 4 7 0 «U fltSCtC «fc *J, ^NStYB&HC 
fi&L Uf^S4 3 2) , ^HWtYB&i— »fA4 5 
10 OAgijJtS Uf>V^S4 3 3) „ 
[00 64] YB = xB*Gt 
(4) #i--tfC*5#(a»D4fifc 
a.-- ifA4 5 0&. ^«S:xA*YB»CJ:y«flf5 

Uf'^S4 0 4) . Jfcfc, a— 9 s B 4 7 0 li. 
te£xB*YAKJ:yjftfrrS (^f^S4 3 4) . 

[0 0 6 5] liT. a— if A 4 5 OCfcUJfefiStufc. 
#fg$xA*YBtt. 
xA*YB= (xAXxB) *Gt 
<D£t)\zm$-T*%Z>. a— tfB4 7 0CJ:yj({B 
20 $*l£#*§ix B * YAH 

xB*YA= (xBXxA) *Gt 
= (xAXxB) *G t 

[0 0 6 6] ^ot, n— ifA4 5 0KL.fcyj*ffi3ttfe. 
**«txA*YBi:, n.— tfB4 7 OJCJiyKffiStvfe 
**«xB*YA4:*«BCti©-e*S3fcl*. s&'bfrT* 
*S. 7. *®«(Z3B^iJ<0§lBSfiCWe«[©— ± 
Uiz J: yCT£ft««Hl&Maaft#&?&« i: LT=fe<fc 

30 *RaB«W^ny5ASr^3>^a-*SIWWR»M 
IBfclBIMBfcfct/rfcJ:^. S&K, iuiBffiRi&HSSft 

[0 0 6 7] it. _tlSlCSi^Lf-ffiRffil^^l§ 
^Lfe^fRffiil^^g?:. f^/Ufc&Kflt t^'* 

fc%mwLti»±*&Ty*)\sm&is*'ruzmm\sT*> 

«fev\ 

40 [0 0 6 8] B&^g. ««es, 

a' . b' fcTcGt fc4^*IBlibtfe»J. ISlgLTV^ 
5=ffRffilS<DA^^-^a , . b' fcTtGtfcfcJg^ 

[0069] if-. ±fs{c^-r^sg^^^©m 

[0 0 7 0] 

50 [|gBJ(Z)^] lo<0«Rfi»E«:3a»L/T 
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ftfeoD i ■3©*rae»E t *4riw «« Rfigg^igg-C' 

feoT, flflW^, JRRpi:. «Rfi»E©AC5*-* 
a&t>7^*-* bi:, hfcUtfflSGt 
SSfftofST'feot, WRffijgEt*. ^PSfcGF 
(p) ±"Waiaft. y*2 = x'3 + ax + b T'^S 
tu TcGt*. *Rffi»E±(C#&U G= (xO, y 
0) TSftSftSStfl^Si:. £P&#GF (p) ±{C#£ 

tt. t*0"C*»J, t*4Xa (mod p) 

it, mm? tsmLT$mtf'i^\ n^tkfrzffif- io 

b' SJrfc&^-^sK-OhTBGt^&Jttti-rs^S 
T'feoT. a' =axt*4, b* =bxt " 6, xt 
0=t *2XxO, y t 0 = t " 3XyO. HRffi*gE 
tit, ;&PK#GF (p) ±Tj6»3ft. y' * 2 = 
x' *3 +a* Xx' +b* T-^^tU x t 0. yt 
*tt-eti7cGt<Z>xffifiKt. yM^fiT-fe-S^fH 

b' fc. 7BGtt5:^S|I^£ii*-r-5ai^#ISi:$:^x. 20 
*. 

[0 0 7 1] £©#teWCfc6fc» 
«Rffi»i:H&££iS«:tf U #JBMJCfc^TWaM: 

jtB«rtWHtt#»K**v*. in?, pi*. 160^7 
h®*aare»y, i&s2Ssi&bgbi»#©wu t * 4 x a 

(mod p) #3 21^ H^TWRK&s, £v*-5 

[0 0 7 2] £©ffRttiBe£^(Cj:y3&£*uMir 

Rffi?££?iJffi^Slci3VNT/Sv^£:, *RSfisMLh<0 2* 30 
Jpcfc^T, SHftWOfllRfiWro/^^-^a^, 16 

»JW»#RJ*. t " 4 X a (mod p) ff- 3 fc& 
<fcv\, 

[0073] iffl«Ria!98B»ss*»cj:»ja3ftanfcit 

RlfifcfcftlJfflaiKfc^TJg^fc, «RWH±©2ffiF 

tt. T=t"4Xa (mod p) fcn-i&frfcSii - 

fc-r f o & fetos-r s 3 t £ 'j ji-r 3 1 iz & y , 
[0074] zommz&zt, m&T u) it, i = 

ZQit. i=0fti*>&ti>T. i ©«£ 1 1*oilffltLfc# 
g§&T (i) ®««:<Wg-rs©T, «2WC-3<Z>ffi 



4*W¥ 1 1 -3 1 6 54 2 
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T'2 S qitoff»B*B!l*T**S*#a\ 

no©?. *%ara«3e»tfRffi»s:iiHi"P«ffiTg5 

*Jf&(4#&-5= ifc. H&T (i) it, i = 0©£:t 
fC, -3©fltfe#LT^3ii:£»^-C, «fi*MB©/h3 
V v«Av & * £ k i: WHC« L T & »J . «fi**fifi©/h 

©^fcv*S^Rfia^e>IWc, JBWaaSWllRfffliS: 

[0 0 7 5] 1 0©*fRl&i&gE 

LTftS© 1 o©*Hlfi»E t Sr^-fSffiRffl?^^ 
Hfc. £j&£*ifc;ff RffiiSgE t £fijj§-f ®fiJJ§3£fi2:^ 

»*. « 1 tattSLtn 1 ^m^tmm^mt 

#StflfRias«llffi#Si:*2ffiA#gi4:S:ffl^ itrta 
^iaj^7#S{±. JHRpi:. «Rft»E<Z)A5^-*a 
&ty^7^-#bi:, ^-^3K-f>hi:bT05t;Gi:S: 
WBfllRfi«a9a»l«^ffl*U lit'- fflRffif^E 
tt. ^PS#=GF (p) ±T?j£*|$n. y * 2 = x * 3 + 
ax + bT'^ctU jbdt, «Rft»E±tCflq9EU G 
= (xO, yO) T-«?£*U «BBK23Mi¥St*, StffS 
*tlffl8«^e>, IRR'pfc. «RtfB»E©yt5^-*aa 
I>V\*7^-^bi:. TTiGt^fU 

*PS#GF (p) ±C#fi-t*S8WSRt feJR 

"4Xa (mod p) t±. 3HRp 4:ifc«l[LT*fi»3&« 

fcvo^s:»u msMHsmmi&mt. 

BIBEtO/^^-^a' Xtfb' il, 
-f>hi:Lr©7nGtfcS:KajU a' =axt"4, 
b' =bxt"6, xtO = t"2XxO, y t 0 = t 
* 3 X y 0, ZZ.X\ «Rffi«SE t it, mimG F 
(p> ±-Cje*3*W y' * 2 = x' *3 + a' x 
x" +b' T-S5tU xtO, ytOli. Znt'tlThG 

tcxisi, yjst«n?»y, «aE»2ai*^i»4, 

|fif^irai$^l^^•5>^-^a , R&b' t, rcGtilS: 

^nfc/N-^^-^a' &0Cb' ^Gt h^gff U 

a' ftOtb' tT'&ZZtfiHtmt, <-7,^yVt 
UT©7cGti:S:M^T. ^PS#:GF (p) ±"Z?J£!B3 
ftfi«RiaB»±1?«)«IWc3S^S. iiwap^s?:$± 

[0 0 7 6] 3©«fiWcj:ai:. 5>afi»{c«is*snfe 
«RftwtHi;s^tt«:*u wa«i«iitS:«riB^-rs 

«Rfi«aS:5PM-r43l4:*«-C*. *CDSISfi9ffl5fiiJi*« 
iz-X^\ lit-, ptdu i 6 0tfy h®»8Sr??*y. 

ffigamffiSMKf^gU^ t"4xa (mod p) 
*«3 2 \Zy h£tT®»tk:«:S. tv^*ffS»fe-f3aSi 
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[0 0 7 7] i®«BlJw«fcSi:, 3Sft£*i&fllRffiiii& 
*RffiS*±©2«»c;i5^T. SBfttt&ff 

RffiHWV?5 * - * a 1 6 0 tl'y h fCj£v vfi&&£ 
&&£im LT. 1 M u 1 #©ft3£i:#8!MT'£ -5 3 

33T% t ■ 4 x 

a (mod p) tf-3fcfcS, fcv^*fr£»fc-*- 

[0 0 7 8] ^©TOCi:^*:, ^£tl£ff RffiiS&£ 
fflirv5©T?, *Rfi*JLi:©2fSJftCfiv\T, *£&£it*ge 
LT, 2Sq^tf««^!BfreS*ifc36i«fJ*S. 3 

«3&»e>**Vv|tN(HaRSCIfcfc. T=t"4Xa 
(mod p) fcv^»frS:»fc-r*^*»S:flfi"fS 

[0 0 7 9] ifiDdftSfCASi:, BSgfcT (i) «. i = 

2 0(1 i=0;fr£>&«>T. i©ffi£ l-foilHIU&tf 20 
6.-BBRT (i) ©tt£*flB"rs<0T, ^:3BfC-3©M 

T* 2 S q^XDttt«*^!IKT*S«^W. S«JIC^SE$ 

n§0T*. *%i^«3Q^Rifiiii*iiHrT?ttffiT?s* 

*«Btt#*S. BS&T (i) tt. i = o©£:£ 

.®5t>«!v«»iiRtfai^e>m»c *®gj&^ffRffii&g& 
[0080] ifc. *$%m** m 2 ^m^hwrnm 

1 o©=ff Rffii&E £S3£LT{tS© 1 o©fg Rffi?£E t & 
£j^S*Rft»8E»Sab&»&, «lB£jS!&3*ifc«fRfil 

is®*, as i as^a*:* i &m^mt$m^®.£ 

$mEl*. HmfcGF (p) _hTj6»S*U y * 2 = x 40 
" 3 + a x + bT'^tU fcGtt, *f Rffi£|IE±tC#& 
U G= (xO, yO) -C*3*U tfflEffi2Sffl3$l 
ttu fUBSftI33£Bfrg>< 3H»pfc. flfRffiMtEfflyC^* 

G8S»Stf##Ji3&4. mmGF (p) _UC?!p&-*-S3E»# 

fro. t*4Xa (mod p) 14. ffftp fcJttRU 

T*aww3v\ £v*e>&#£»u msttFimmai 

l J. «R«SEt©A7^-^a' 2£tfb' TtGt 50 



^¥11-3 l-6 542' : 
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i: fcgffl U a' =axt "4. b ' =bxt ' 6, x 
t0 = t ' 2XxO, yt0 = t"3Xy0. ZLZ.T\ 

uniBSEttt. mtmGF (p) ±-e*ns*u y* 

"2 = x* "3 + a' Xx' +b* T?^3*U x 
tO. ytOtt, ■€-n-?*l7cGtOxjaSHl ( . y&Sft 

x*&y. tosai52ai##Ktt. wiBJicaisnfc^^- 
iaism i sm^mt. tMEffi^snfe/^^-^a' & 

tfb' TcGtfc&SHU BuiE?TO#@li, ^Ep 
tirlESiSLfcA^*-* a' fttfb' £T*£s;5ff 
Rfflii:. HfcLT©7cGtfc£J3v*T. 
^Rg^GF (p) ±-T«S*l**RiaiMLfcT®iBJnc 

[0 0 8 1] 3<&*fifcK:j:Sfc. yZ/^fCttfifcStlfe 

*Ria»4:racsc±is«:*u iKa^awsRHHc-r* 

«RlBWS:«ra-rSii:*«T»fS, ^©IIMKtfWIte^S 

•t£j*sttfe«Rffi»E t srjpj«-r**(iM$are*tD 

T, tiff^OT^M{i, ffiRft^EtO/^^-^a' 25. 
tfb' ^-X^-f>hi:UT07cGt HZmnLT 
v^iB'H#@il. Ph. WSSIBt»l/T^*^9^-* 
a' Rtfb' fcT?J£***RffliWi:, 
UTfflTBGt^SrM^T, *PI#GF (p) ±T*^$ 

n**RfflMi±T®ao»ca^sf. 

^^-^ a' Rocb' kg t timH&memm 
*Ra»waj#«**>L pi4*88re*y. * 

Rft«gE}i. ^PS^GF (p) ±T'^«$n. y * 2 = 
x " 3 + a x + b K-T^-tfyj h i: LTcDtc 

GA\ *RattllE±fcaEfiEU G= (xO, yO) 

ztu mzm&mmm^m*. mw&G? (p) ±c 

t^OT'S'J, 7b^O, t"4Xa (mod p) «, 
3((Rp^Jt«LT*B8S«^hSv\ fcv^^fefrS:»U «T 

b' mt-^-^>(yhthx<n7zGt 

U a' =axt"4. b' =bxt " 6, xtO = t 
*2Xx0. yt0 = t"3Xy0. ZZ.T\ ^fRffl«S 
Etti. %18&GF (p) ±T'S*$tU y' " 2 = 
x' " 3 +a' Xx' +b' T'^^tU xtO, y 
to 14. -fn-f*i7cGt©xaaMI. y&WMX'&Z. 

[0082] z.<Dmmz&h£. ^yf^zm&imt- 

lfRfi^?:^JS1-S3i:7!)>T'$. *©Hfll«flH([t*#W 
»C*SV\ *I§^I4, 1 o©=ff Rfi^E S'^L 
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Tftfio l otftff RfisIE t *«HflM8Se»#i£ 
T'feoT. JBBtpfc. |gRi&3gE<Z>A^*- 

£&£frf©*-ry?"T'&oT. IfRffittEMu 
G F (p) ±T'5£^£*U y"2 = x'3 + ax + bt' 
g?$*U TTjGtt, *Rffi»E±KH£fiEU G= (xO, 
yO) -eaSftSSfl^-r^i:. WPSftGF (p) ± 

Sffifttli. t*Ot'feU. fro. t*4Xa (mo 
d p) tt. 3)^ptJtRLT«38tf»Vl^''V fcne>& 

-*a' £.tfb' hs mt~^-^^ybtLX<D7Z 
Gt £Zg.mtZ>* : rv7T'}tbvX. a' = aXt* 
4. b' =bxt " 6. xtO = t*2XxO. ytO 
= t * 3XyO, MSEtll mm-GF (p) ± 
T36«IS*l. y' "2 =x' *3 +a' Xx* + 
b' T'^StU xtO. ytOfi. J ttl s t't^7bGt<Dx 

mm. ymmsv^^Fimmiii^y^t. tsis 
[0 0 8 3] zo-fimzm^zt.. ^y^'^zm^n 

*t reffiiS&E fcasftuxte© i o©« rs^e t 

^S5fre>, iRRpfc. «Rffiii«E©/\*7*-*a&tfr< 
^-^/K-O hi: LTOTttG 4: «:*«■*■ 
4Xf;^tf*oT, *RtfM»Ett, *PR#GF (p) 
JbT'^^tU y "2 = x*3 + ax+bt'*Sft. jt; 
Gtt. WRliaiE±K#asU G- (xO, yO) Tf« 
SnsSfl^-r^i:. «PS»GF ( P ) ±iz&&?2> 

«U t^Offe'J- fro. t'4Xa (mod p) 
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aifb" t, mr^^-^^ybiiLx^Gt tz. 

nmir^b^V^Xm-DX. a' =axt"4. b' = 
bxt * 6, xt0 = t ' 2XxO, yt0 = t*3X 
yO. flFRffigREtl*. WGF (p) ±T?JgJftS 
n. y' *2 =x' "3 + a' Xx" +b' T'3lc 
tU xtO, ytOlt ^ft-?-'tl7EGt©xJ©g{I. y 
fflWtTfifeSfllRflMWffi^T-v^i:. iWEIWBSnfe 
10 ^5*-* a' fttfb' TcGtfcStfMS^flSA-tS 

[0 0 8 4] iffl^lC|E»£ftTV*3^ny5A«:3 

a^Sr^Kl1-S*R«a»S:&W-53i:3!)<TS. -f 
[^©flMtfeStft] 

[Hi] x v;ug£,{c £ -5 -r v * ;L*fe^:©#)l 

20 [EI 2] #!8?BtC«S 1 "3®SQ6C»B»t LTCDflfR* 
MSBftKB©:^ <y * 0T'&£. 
[03] H2^^Rlft«8^S8iri?fl3^e>*V5BBR 
T (i) &8WB-**SiT***. 

[04] H2C3WiRiaiasa«Eat©»ffS:35%-r7n 
[05] m2\z^<-tnvim§mmm.oymmm^m^ 

CDMftZ:m-?7U-^ J r-bX'3bZ>. 
•[06] 02'C^-r«Rffii|^^aS©WfRffii^ 

30 [07] H2^t1ffRif&iHS@ft£SS&ilM-r«fly^ 

2 0 0 If Rfi«g^^ga 

210 /f5*-*gflKiJ 

2 2 0 '2$6$»r#3P 

2 3 0 SBftflF RS&KWffiffl 

24 0 A5*-*i£2iigfJ 



(16) 



11-316542 



imi] 



[H2] 



[03] 




T 



RI=(rx.iy)=k*G 



T 



aXk-m+rxXxA ^S147 
St* 



m.RJ.s 



,S148 



SU9 



s*Rl=m*G+rx*YA 



G, p, «. b 



200 «*n&««jt£w 







210 














220 










^230 










^240 
















Gt. a', b' 





1 


tw 


0 


-3 


1 


1 


2 


-1 


3 


2 


4 


-2 


5 


3 


6- 


4 


7 


-4 


8 


5 


9 


-5 


10 


6 


11 


-6 







CH6] 



CH4] 



nan 



^✓S30 1 



✓S302 



^S303 



✓S304 



b'£Gt£**ffl*r* 



'S305 



^aatlfca, b'. Gt£*ffi^ 




C waft ) 



-S321 



a' = aXt 4**ai 



I 



b* = bXt*6fc#fcb 



-S322 



^S3 23 
[ t~2XxQgyffl 1 



.S324 



t3XyO*£ffi_ 




(17) 4#BFF1 1-3 1 6 54 2 



[07] 



E.*y 2-x 3+sXx+b 




470 



S431 



^S432 




xB* YA=(xBXxA)*Ci 

-6cAXxB)*Ct 



THIS 



PAGE BLANK (usno) 



